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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
Application: 



1. (Original) A method for global sign-on (GSO) comprising the steps of: 

receiving a user login; 

determining an existence of a first directory entry corresponding to said user in 
response to a first Lightweight Directory Access Protocol (LDAP) message; and 

logging said user into one or more data processing services in response to one or 
more corresponding second directory entries, and wherein each of said first and second 
directory entries represents a data structure in accordance with a corresponding first and 
second predetermined LDAP schema object. 

2. (Currently amended) The method of claim 1 wherein each of said corresponding 
second predetermined LDAP schema objects has one or more predetermined attributes, 
each of said one or more attributes having a set of one or more values, and wherein a first 
one of said plurality of one or more attributes is operable for initiating a corresponding 
one of said data processing services. 

3 . (Currently amended) The method of claim 2 wherein said step of logging said user into 
one or more data processing systems is in response to first one of said plurality of one or 
more attributes having a first predetermined data value. 

4. (Original) The method of claim 1 wherein said step of logging said user into said one 
or more data processing services comprises the steps of: 

for each data processing service, reading a user identifier (UID) and a password 
from a corresponding one of said second directory entries; and 
logging in said user using said UID and said password. 

5. (Original) The method of claim 1 further comprising the step of starting said one or 
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more data processing services in response to one or more third directory entries, each of 
said third directory entries representing a data structure in accordance with a 
corresponding third predetermined LDAP schema object. 

6. (Original) The method of claim 5 further comprising the step of invoking an 
initialization routine corresponding to each of said data processing services, wherein each 
of said corresponding third predetermined LDAP schema objects includes a set of one or 
more attributes, and wherein said initialization routine is determined in response to a value 
of a first attribute of said set of one or more attributes. 

7. (Original) The method of claim 1 wherein said step of logging said user into one or 
more data processing services includes the step of determining if a first one of said data 
processing services requires a prerequisite service. 

8. (Original) The method of claim 7 wherein each of said corresponding second 
predetermined LDAP schema objects has one or more predetermined attributes, each of 
said one or more attributes having a set of one or more values, and wherein determining 
if said first one of said data processing services requires a prerequisite service is in 
response to a preselected value of a first one of said one or more attributes. 

9. (Original) The method of claim 1 wherein said step of logging said user into one or 
more data processing services includes the step of determining if a first one of said data 
processing services takes an identifier value. 

10. (Original) The method of claim 9 wherein determining if a first one of said data 
processing services takes an identifier value is in response to a fourth directory entry, said 
fourth directory entry representing a data structure in accordance with a corresponding 
fourth predetermined LDAP schema object. 

1 1 . (Original) The method of claim 1 0 wherein said fourth predetermined LDAP schema 
object has one or more predetermined attributes, each of said one or more attributes 
having a set of one or more values, and wherein determining if said first one of said data 
processing services takes an identifier value is in response to a preselected value of a first 
one of said one or more attributes. 
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12. (Original) The method of claim 11 further comprising the step of invoking an 
initialization routine corresponding to said first data processing service in response to an 
attribute value in a third directory entry corresponding to said first data processing 
service, said third directory entry representing a data structure in accordance with a 
corresponding third predetermined LDAP schema object, said initialization routine being 
determined in response to said attribute value, and wherein said identifier value is passed 
to said initialization routine. 

13. (Original) The method of claim 9 wherein said identifier value is a required identifier 
value. 

14. (Original) The method of claim 9 wherein said identifier value is an optional identifier 
value. 

15. (Original) A computer program product embodied in a tangible storage medium, the 
program product including programming for global sign-on (GSO), the programming 
comprising instructions for performing the steps of: 

receiving a user login; 

determining an existence of a first directory entry corresponding to said user in 
response to a first Lightweight Directory Access Protocol (LDAP) message; and 

logging said user into one or more data processing services in response to one or 
more second directory entries, and wherein each of said first and second directory entries 
represents a data structure in accordance with a corresponding first and second 
predetermined LDAP schema object. 

16. (Currently amended) The computer program product of claim 15 wherein each of 
said corresponding second predetermined LDAP schema objects has one or more 
predetermined attributes, each of said one or more attributes having a set of one or more 
values, and wherein a first one of said plurality of one or more attributes is operable for 
initiating a corresponding one of said data processing services. 

17. (Currently amended) The computer program product of claim 16 wherein said step 
of logging said user into one or more data processing systems is in response to first one 
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of said plurality of one or more attributes having a first predetermined data value. 

18. (Original) The computer program product of claim 15 wherein said step of logging 
said user into said one or more data processing services comprises the steps of: 

for each data processing service, reading a user identifier (UID) and a password 
from a corresponding one of said second directory entries; and 
logging in said user using said UID and said password. 

19. (Original) The computer program product of claim 15 further comprising the step of 
starting said one or more data processing services in response to one or more third 
directory entries, each of said third directory entries representing a data structure in 
accordance with a corresponding third predetermined LDAP schema object. 

20. (Original) The computer program product of claim 19 further comprising the step of 
invoking an initialization routine corresponding to each of said data processing services, 
wherein each of said corresponding third predetermined LDAP schema objects includes 
a set of one or more attributes, and wherein said initialization routine is determined in 
response to a value of a first attribute of said set of one or more attributes. 

21 . (Original) The computer program product of claim 1 5 wherein said step of logging 
said user into one or more data processing services includes the step of determining if a 
first one of said data processing services requires a prerequisite service. 

22. (Original) The computer program product of claim 21 wherein each of said 
corresponding second predetermined LDAP schema objects has one or more 
predetermined attributes, each of said one or more attributes having a set of one or more 
values, and wherein determining if said first one of said data processing services requires 
a prerequisite service is in response to a preselected value of a first one of said one or 
more attributes. 

23. (Original) The computer program product of claim 15 wherein said step of logging 
said user into one or more data processing services includes the step of determining if a 
first one of said data processing services takes an identifier value. 
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24. (Original) The computer program product of claim 23 wherein determining if a first 
one of said data processing services takes an identifier value is in response to a fourth 
directory entry, said fourth directory entry representing a data structure in accordance 
with a corresponding fourth predetermined LDAP schema object. 

25. (Original) The computer program product of claim 24 wherein said fourth 
predetermined LDAP schema object has one or more predetermined attributes, each of said 
one or more attributes having a set of one or more values, and wherein determining if said 
first one of said data processing services takes an identifier value is in response to a 
preselected value of a first one of said one or more attributes. 

26. (Original) The computer program product of claim 25 further comprising the step of 
invoking an initialization routine corresponding to said first data processing service in 
response to an attribute value in a third directory entry corresponding to said first data 
processing service, said third directory entry representing a data structure in accordance 
with a corresponding third predetermined LDAP schema object, said initialization routine 
being determined in response to said attribute value, and wherein said identifier value is 
passed to said initialization routine. 

27. (Original) The computer program product of claim 23 wherein said identifier value 
is a required identifier value. 

28. (Original) The computer program product of claim 23 wherein said identifier value 
is an optional identifier value. 

29. (Original) A data processing system for global sign-on (GSO) comprising: 

circuitry operable for receiving a user login; 

circuitry operable for determining an existence of a first directory entry 
corresponding to said user in response to a first Lightweight Directory Access Protocol 
(LDAP) message; and 

circuitry operable for logging said user into one or more data processing services 
in response to one or more second directory entries, and wherein each of said first and 
second directory entries represents a data structure in accordance with a corresponding 
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first and second predetermined LDAP schema object. 

30. (Currently amended) The data processing system of claim 29 wherein each of said 
corresponding second predetermined LDAP schema objects has one or more 
predetermined attributes, each of said one or more attributes having a set of one or more 
values, and wherein a first one of said plurality of one or more attributes is operable for 
initiating a corresponding one of said data processing services. 

3 1 . (Currently amended) The data processing system of claim 30 wherein said circuitry 
operable for logging said user into one or more data processing systems is operable in 
response to first one of said plurality of one or more attributes having a first 
predetermined data value. 

32. (Original) The data processing system of claim 29 wherein said circuitry operable for 
logging said user into said one or more data processing services comprises: 

circuitry operable for, for each data processing service, reading a user identifier 
(UID) and a password from a corresponding one of said second directory entries; and 
circuitry operable for logging in said user using said UID and said password. 

33. (Original) The data processing system of claim 29 further comprising circuitry 
operable for starting said one or more data processing services in response to one or more 
third directory entries, each of said third directory entries representing a data structure in 
accordance with a corresponding third predetermined LDAP schema object. 

34. (Original) The data processing system of claim 33 further comprising circuitry 
operable for invoking an initialization routine corresponding to each of said data 
processing services, wherein each of said corresponding third predetermined LDAP 
schema objects includes a set of one or more attributes, and wherein said initialization 
routine is determined in response to a value of a first attribute of said set of one or more 
attributes. 

35. (Original) The data processing system of claim 29 wherein said circuitry operable for 
logging said user into one or more data processing services includes circuitry operable for 
determining if a first one of said data processing services requires a prerequisite service. 
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36. (Original) The data processing system of claim 35 wherein each of said corresponding 
second predetermined LDAP schema objects has one or more predetermined attributes, 
each of said one or more attributes having a set of one or more values, and wherein 
determining if said first one of said data processing services requires a prerequisite service 
is in response to a preselected value of a first one of said one or more attributes. 

37. (Original) The data processing system of claim 29 wherein said circuitry operable for 
logging said user into one or more data processing services includes circuitry operable for 
determining if a first one of said data processing services takes an identifier value. 

38. (Original) The data processing system of claim 37 wherein said circuitry operable for 
determining if a first one of said data processing services takes an identifier value is 
operable in response to a fourth directory entry, said fourth directory entry representing 
a data structure in accordance with a corresponding fourth predetermined LDAP schema 
object. 

39. (Original) The data processing system of claim 38 wherein said fourth predetermined 
LDAP schema object has one or more predetermined attributes, each of said one or more 
attributes having a set of one or more values, and wherein determining if said first one of 
said data processing services takes an identifier value is in response to a preselected value 
of a first one of said one or more attributes. 

40. (Original) The data processing system of claim 39 further comprising circuitry 
operable for invoking an initialization routine corresponding to said first data processing 
service in response to an attribute value in a third directory entry corresponding to said 
first data processing service, said third directory entry representing a data structure in 
accordance with a corresponding third predetermined LDAP schema object, said 
initialization routine being determined in response to said attribute value, and wherein said 
identifier value is passed to said initialization routine. 

s 

41. (Original) The data processing system of claim 37 wherein said identifier value is a 
required identifier value. 
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42. (Original) The data processing system of claim 37 wherein said identifier value is an 
optional identifier value. 
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